Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/5acde123-8b2a-32d5-8223-e6b8a8424390.roa
File:                     5acde123-8b2a-32d5-8223-e6b8a8424390.roa (raw, json)
Hash identifier:          Vbn2Csrgd7JdhjNXJHWY91ixN/OM2UXSHnU2nVHlbjI=
Subject key identifier:   6B:C3:F1:ED:23:2D:9E:39:2C:5A:17:09:38:62:27:E3:4D:51:53:56
Certificate issuer:       /CN=a05c180d-6db0-4307-bc39-264e11bb765c
Certificate serial:       010D0C9F4328584E8B24EDE044645C36EE598F80
Authority key identifier: FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/5acde123-8b2a-32d5-8223-e6b8a8424390.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     27768
IP address blocks:        66.249.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:ed:e0:44:64:5c:36:ee:59:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a05c180d-6db0-4307-bc39-264e11bb765c
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=07d571e1-54ca-46a9-8eab-c34cf232ebe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8c:bf:a8:fd:8d:12:e9:4a:18:f8:ed:b1:65:
                    77:13:8c:72:46:1c:d0:bc:af:01:04:13:70:e4:80:
                    1c:10:43:e2:9d:53:16:91:bd:9e:8c:00:63:b8:32:
                    02:a0:9f:ed:7a:f8:6b:c2:82:1a:dd:73:cc:ff:de:
                    9b:8f:6b:6a:bb:24:0f:40:7f:94:f6:9e:28:db:85:
                    37:87:5e:fa:70:e8:fd:12:5a:bd:db:a0:09:fe:00:
                    ce:7f:79:88:bd:dd:7b:e6:f4:e0:80:df:8c:0d:1e:
                    61:8d:ba:13:b7:bf:3a:c7:2a:bc:41:cf:9f:f3:a2:
                    35:79:ed:2a:56:66:c6:54:82:a2:c0:23:6c:59:8a:
                    cf:ac:39:63:c9:94:da:53:9c:c9:d7:b0:95:5e:b1:
                    4b:08:6d:42:7a:ec:87:ea:00:e0:83:25:5c:a4:18:
                    92:bc:ce:d4:58:24:24:39:62:c5:94:33:ea:e1:38:
                    a7:1a:77:98:b8:65:9d:2f:a9:a7:4a:b1:b4:2a:c9:
                    87:8c:f2:9b:fb:f2:69:24:63:fd:49:ce:fd:89:8b:
                    c8:29:c6:39:fe:41:c7:44:18:db:95:38:38:4d:0f:
                    89:ab:87:f4:bc:a2:19:9f:60:90:90:71:9d:91:a5:
                    4e:23:4a:aa:b2:d4:5d:0d:25:ed:5f:ee:9d:68:07:
                    b3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C3:F1:ED:23:2D:9E:39:2C:5A:17:09:38:62:27:E3:4D:51:53:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/5acde123-8b2a-32d5-8223-e6b8a8424390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl

            X509v3 Authority Key Identifier:
                keyid:FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.249.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:94:de:5b:a3:67:ba:7f:a5:55:ca:99:15:5e:f9:a4:46:1b:
         be:dc:01:bf:12:1d:de:e7:fc:7e:9e:05:de:f4:d8:aa:3c:3c:
         e6:77:30:c4:3a:7f:ab:e7:14:e8:f4:63:af:80:a9:e1:13:79:
         65:c2:2e:bf:f0:45:39:08:f3:10:7e:d5:a4:a3:8e:95:ff:cd:
         31:bf:b2:ae:ce:0e:99:65:6f:a1:2e:c8:46:82:35:a1:f6:69:
         82:70:7e:3a:6b:dc:8c:ee:e0:d0:52:0c:bc:3d:04:ff:58:29:
         0b:cf:a0:a2:05:8a:56:82:47:63:d3:f5:6d:da:fd:8d:9c:e9:
         b8:9f:74:00:40:98:af:d5:e3:61:6a:96:a8:3d:51:e4:22:04:
         e6:48:95:f3:5f:ed:72:a7:41:04:69:59:d6:34:e7:17:46:fa:
         97:3d:72:13:ee:09:e1:8b:2c:fb:e4:5d:b4:75:e7:b2:f8:75:
         cb:42:fd:1c:e1:6b:31:c0:61:ca:c7:84:e2:1a:7e:c5:08:da:
         a9:73:f7:fb:9a:db:e2:de:95:59:ce:54:08:06:7c:8f:b8:74:
         23:58:f9:e5:b8:a4:a1:7b:b0:bf:8d:ac:07:a2:64:02:79:61:
         19:24:94:ef:1f:9d:89:df:44:88:92:30:23:d3:ff:8a:ec:be:
         3f:b4:6f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:19:29 2026 by rpki-client